How can I assume a specific role for S3 access?
I only have access to S3 via temporary credentials. How can I use these in Deephaven?
One way to use temporary credentials in Deephaven is to configure the AWS SDK to use them. Consider an AWS credentials file with a user and a specific role:
[profile SomeUser]
# SomeUser is configured with access keys, SSO, or other credentials
[profile SomeSpecificRole]
role_arn = ...
region = ...
source_profile = SomeUser
SomeSpecificRole
uses SomeUser
to assume a role. With this configuration, you can use the appropriate profile as input to an S3Instructions
object like this:
from deephaven.experimental.s3 import S3Instructions
# Ignoring other input parameters for brevity
s3_instructions = S3Instructions(
profile_name="SomeSpecificRole",
)
This configuration uses AWS Security Token Service (STS) to assume a role and obtain temporary credentials.
Note
These FAQ pages contain answers to questions about Deephaven Community Core that our users have asked in our Community Slack. If you have a question that is not in our documentation, join our Community and we'll be happy to help!